Privacy Policy for Vocora

Last updated: [EFFECTIVE DATE — e.g. May 29, 2026]

1. The short version

Vocora is a communication app (an AAC app) that helps people speak using word and symbol boards, saved phrases, and text-to-speech.

Here's what matters most:

• Vocora works offline first. Most of what you enter stays on your device.

• Nothing goes to the cloud unless you turn on sync. That's your choice, and it's off by default.

• We don't track you or run ads. No location tracking, no ad networks, no analytics SDKs.

• We never sell your information. Including health information. Ever.

The rest of this policy explains the details. Vocora is operated by Noema Labs LLC, and by using the app you agree to what's described here.

2. Who uses Vocora

Vocora is often set up and managed by a parent, guardian, caregiver, therapist, or educator (a "Caregiver") on behalf of the person who uses it to communicate (a "Communicator").

If you're a Caregiver entering information about someone else, you're responsible for having the right to do so and for managing their privacy choices. See Section 11 for more on children's privacy.

3. What information the app handles

You decide what to put into Vocora. Depending on which features you use, the app may handle:

Account info (only if you sign in)

• Your email and name from Sign in with Apple or Google Sign-In

• An ID used to sync your data

Profile and personal info

• Name, preferred name, age or birthday, pronouns, language preferences

• Postal address (optional)

• Profile photo or avatar (optional)

Contacts you add

• Names, phone numbers, emails, addresses, relationship, emergency-contact flag, and notes

Health info (optional, entered by you)

• Medical conditions, allergies and their severity, medications and doses, dietary restrictions, mobility and sensory notes, communication notes, emergency instructions, preferred hospital, and physician name and number

Communication content and usage

• Boards, categories, and tiles you create

• Saved phrases, including emergency, repair, and sensory phrases

• Phrase and conversation history as you communicate

• Anonymous, on-device counts (like how often a tile is used) that power vocabulary insights

App settings and preferences

Microphone audio — only when you actively use the optional speech-to-text feature ("Partner Listen"), and only if your build includes it (see Section 6).

Photos and camera — only when you choose to add a profile photo or tile image.

What we don't collect

• Your location. The app never asks for or accesses it.

• Advertising or tracking data. No ad IDs, ad networks, or third-party tracking SDKs.

• Anything to sell. We don't sell your information or share it for ads or cross-app tracking.

4. Where your information is stored

On your device (the default). Everything above is stored locally by default. Sensitive items like login tokens are kept in secure device storage.

In the cloud (optional, and only if you choose). If you create an account and turn on Cloud Sync in Settings, your profiles and data are backed up to Google Firebase (Cloud Firestore and Cloud Storage) so you can use them across devices. Sync is off unless you sign in and switch it on. If you never sign in, your data never leaves your device

5. How we use your information

We use it only to run and improve the app's communication features — specifically to:

• Show your boards, tiles, phrases, and profile, and let you communicate with text-to-speech

• Save your settings and customizations

• Sync and back up your data across devices (only if you turn on cloud sync)

• Keep the emergency and medical info you've stored available when you need it

• Generate communication suggestions and vocabulary insights

• Sign you in and keep your account secure

We don't use your information for advertising or to build marketing profiles.

6. AI and speech features

Text-to-speech happens on your device. Spoken output uses your device's built-in speech engine. The words being spoken are never sent to us.

AI suggestions. Vocora can suggest words and layouts.

7. Companies that help us run Vocora

When you use the cloud features above, we rely on these service providers ("sub-processors"). They handle data on our behalf under their own terms and privacy policies:

Apple, Google

We don't share your information with anyone else, except as described in Section 8.

8. When we share information

We only share information in these limited situations:

• When you tell us to — for example, when you export, share, or print a report (like a PDF clinician report) using the app's sharing tools.

• With the service providers in Section 7 — to run the app.

• When the law requires it — to comply with a law, regulation, legal process, or valid government request.

• To keep people safe — to protect the rights, safety, or property of users or others.

• In a business transfer — if the company is merged, acquired, or sold, this policy still applies.

We never sell your personal or health information.

9. Your choices and rights

You're in control of your data:

• See and edit it — view and change any profile, contact, medical, or communication info right in the app.

• Export it — export profiles, make backups, and export vocabulary data (CSV) with the app's export tools.

• Delete a profile — remove individual profiles and their data in the app.

• Delete your account — go to Settings → Delete Account to remove your account and cloud data. Uninstalling the app removes data stored on your device.

• Turn off sync — switch off Cloud Sync anytime in Settings to keep data on your device only.

10. Keeping your data safe and how long we keep it

We keep your information for as long as your account or profile exists, or as long as we need it to run the app. When you delete a profile or account, we delete or de-identify the data — though it may take a short while to clear from backups.

We protect your information with reasonable safeguards: secure on-device storage for credentials, optional biometric app lock, encrypted connections (HTTPS/TLS) for anything sent to the cloud, and access rules that limit cloud data to your signed-in account. That said, no system is perfectly secure, so we can't promise absolute security.

11. Children's privacy

Vocora is built to support communication for people of all ages, including children and people with disabilities, and is usually set up and supervised by a Caregiver. We don't knowingly use children's information for anything other than providing the communication features described here — never for advertising or tracking.

12. International data transfers

If you use cloud features, your information may be processed and stored on servers in other countries, including the United States, by the providers listed in Section 7. Those providers maintain their own safeguards for international transfers. By using the cloud features, you understand your information may be sent to these locations.

13. Changes to this policy

We may update this policy from time to time. When we make meaningful changes, we'll update the "Last updated" date above and, where appropriate, give you notice in the app. Continuing to use Vocora after changes take effect means you accept the updated policy.

14. How do I delete my account?

In the app, specifically int he settings page on the bottom. There is an option to delete your account.

15. Contact us

Questions, requests, or concerns about this policy or your information? Reach us at: support@noemalabs.io